What is Nostr?
Dan Luu /
npub1pm9…88nl
2024-01-24 22:08:35

Dan Luu on Nostr: This discussion on the GitHub bug that let you make a "GitHub.com signed" commit as ...

This discussion on the GitHub bug that let you make a "GitHub.com signed" commit as anybody (which is tagged as "Verified") makes me wonder if I'm missing something about parsers vs. regexes.

I'm not an expert (I've written maybe ~10 parsers on my life) but, in my mind, parsers seem easier to test and verify.

Many people seem to think that a parser would've had the exact same bug, but I would expect that a parser with the exact same bug would error out when it encountered an unexpected field.

Author Public Key
npub1pm93exm0eyfep2635k3epqh5f39tuzse44nuvwmsn5t4a0erureqnl88nl